CVE-2012-5667

Published: Jan 3, 2013Modified: Apr 29, 2026

4.4

Vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 3.4 / Impact: 6.4

Source: NVD

Description

Multiple integer overflows in GNU Grep before 2.11 might allow context-dependent attackers to execute arbitrary code via vectors involving a long input line that triggers a heap-based buffer overflow.

Affected (18)

Products: Gnu: Grep

1 product

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Gnu Grep	Up to 2.10
Gnu Grep	Version 2.2
Gnu Grep	Version 2.3
Gnu Grep	Version 2.4.1
Gnu Grep	Version 2.4.2
Gnu Grep	Version 2.4
Gnu Grep	Version 2.5.1
Gnu Grep	Version 2.5.1 a
Gnu Grep	Version 2.5.3
Gnu Grep	Version 2.5.4
Gnu Grep	Version 2.5
Gnu Grep	Version 2.6.1
Gnu Grep	Version 2.6.2
Gnu Grep	Version 2.6.3
Gnu Grep	Version 2.6
Gnu Grep	Version 2.7
Gnu Grep	Version 2.8
Gnu Grep	Version 2.9

Related CWEs

References (18)

http://git.savannah.gnu.org/cgit/grep.git/commit/?id=8fcf61523644df42e1905c81bed26838e0b04f91

Source: secalert@redhat.com

Patch

http://git.savannah.gnu.org/cgit/grep.git/commit/?id=cbbc1a45b9f843c811905c97c90a5d31f8e6c189

Source: secalert@redhat.com

Patch

http://git.sv.gnu.org/gitweb/?p=grep.git%3Ba=shortlog%3Bh=v2.11

Source: secalert@redhat.com

http://lists.gnu.org/archive/html/bug-grep/2012-12/msg00004.html

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2012/12/22/6

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-1447.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/57033

Source: secalert@redhat.com

https://bugs.launchpad.net/ubuntu/+source/grep/+bug/1091473

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=889935

Source: secalert@redhat.com

http://git.savannah.gnu.org/cgit/grep.git/commit/?id=8fcf61523644df42e1905c81bed26838e0b04f91

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://git.savannah.gnu.org/cgit/grep.git/commit/?id=cbbc1a45b9f843c811905c97c90a5d31f8e6c189

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://git.sv.gnu.org/gitweb/?p=grep.git%3Ba=shortlog%3Bh=v2.11

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.gnu.org/archive/html/bug-grep/2012-12/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2012/12/22/6

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2015-1447.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/57033

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.launchpad.net/ubuntu/+source/grep/+bug/1091473

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=889935

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.